mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Br3akp0int
888c2249e8
* netsupport * netsupport * netsupport * netsupport * Update detections/endpoint/windows_executable_masquerading_as_benign_file_types.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * Update detections/endpoint/windows_executable_masquerading_as_benign_file_types.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * Update data_sources/sysmon_eventid_29.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * Update data_sources/sysmon_eventid_29.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * Update detections/endpoint/windows_executable_masquerading_as_benign_file_types.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * Update detections/endpoint/windows_executable_masquerading_as_benign_file_types.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * Update detections/endpoint/windows_executable_masquerading_as_benign_file_types.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * Update detections/endpoint/windows_executable_masquerading_as_benign_file_types.yml Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> * netsupport * netsupport * netsupport * netsupport * updates * small fixes --------- Co-authored-by: Teoderick Contreras <tcontreras@splunk.com> Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com> Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
4 lines
239 B
YAML
4 lines
239 B
YAML
definition: (TargetFilename IN ("*.exe", "*.dll", "*.sys", "*.ocx", "*.scr", "*.cpl", "*.efi", "*.drv", "*.bpl", "*.ax", "*.ime", "*.acm", "*.rll", "*.tsp"))
|
|
description: matches known executable file extension
|
|
name: executable_extensions
|